CBSA Security & Compliance 5

Question 1

In a multi-organizational blockchain consortium, which governance mechanism helps enforce compliance across participants with different regulatory jurisdictions?

Accepted Answer

Consortium governance framework with jurisdiction-specific policy layers

Answer

A single global smart contract that overrides local regulations

Answer

Delegating all compliance decisions to the founding organization

Answer

Using Proof of Authority with regulators as the sole validators

Question 2

What is the function of a 'multi-party computation (MPC)' protocol in blockchain key management?

Accepted Answer

Enabling multiple parties to jointly compute operations on private keys without any single party seeing the full key

Answer

Distributing transaction validation across multiple consensus nodes

Answer

Splitting the blockchain ledger across multiple databases

Answer

Coordinating simultaneous smart contract execution across chains

Question 3

Which regulatory requirement mandates that financial institutions maintain an audit trail of all transactions, making blockchain's immutability a natural fit?

Accepted Answer

SOX Section 404

Answer

GDPR Article 17

Answer

HIPAA Privacy Rule

Answer

CCPA Right to Delete

Question 4

In Hyperledger Fabric, what is the purpose of the 'MSP' (Membership Service Provider)?

Accepted Answer

To define the rules for validating identities and determining membership in the network

Answer

To manage the throughput and scalability of chaincode execution

Answer

To provide a marketplace for smart contract templates

Answer

To coordinate multi-channel transaction ordering

Question 5

What distinguishes a 'supply chain attack' on blockchain infrastructure from a traditional cyberattack?

Accepted Answer

It compromises software or hardware components before they reach the target organization

Answer

It targets the consensus algorithm rather than network nodes

Answer

It exploits vulnerabilities in the physical supply chain ledger data

Answer

It uses blockchain transactions to deliver malware payloads

Question 6

Which cryptographic primitive ensures that a sender cannot later deny having sent a blockchain transaction?

Accepted Answer

Digital signatures

Answer

Symmetric encryption

Answer

Hash functions

Answer

Message authentication codes (MACs)

Question 7

When conducting a threat model for a public blockchain application, which framework is commonly used to categorize potential threats?

Accepted Answer

STRIDE

Answer

OWASP Top 10

Answer

CVSS

Answer

MITRE ATT&CK